Move threat model doc to GitHub

Move threat model doc to GitHub
Good point, updated.